About travisj

We are about to replace a single 2050 with an HA pair of 3050's.   Having some trouble figuring out how to get the switch and Pa configured so I can share the single ISP connection with both firewalls.   Current setup has interface 1/3 as L3 with the WAN ip address   I was trying to minimize the changes to make (because 2050 is insanely slow to commit) so attempted using a new vlan 111 on our core switch, set it up on two ports in access mode (untag all) and tried moving the ISP router and the palo alto wan interface into the switch on those two ports.   Am I going to need to change the wan interface on the palo alto to have a tagged sub interface on vlan 111 and move the wan IP addresses to it?   Hopefully I'm just missing something simple.   thanks,     ... View more

Let's say we  have an external facing interface  Ethernet1/3  with  Ip address of 1.1.1.14/28.   The upstream isp router is 1.1.1.1 all other addresses (1.1.1.2-1.1.1.14) are routed to the Palo Alto and in use for various web services, etc.. Per the documentation I can find it looks like you have to set the Global Protect gateway IP address to the address you have set on the interface.   Is there a way to use one of the other addresses in the range we have assigned?  e.g.  1.1.1.10 mdl: PA-2050 Pan-OS 6.0.4 ... View more